syslog is your monitor tool.. (use swatch to monitor your xferlogs and notify you when something happens.. ie.. when somone gets file a.out ) a look at my /var/log/xferlog Sun Oct 23 10:14:31 2005 1 151.205.52.2 145408 /home/updates/updates/TOOLS/msconfig.exe b _ o r helpdesk ftp 0 * c shows when,what,who... hope this helps..